Episode Details
Back to EpisodesYour developers are the attack surface now and vibe coding as a vulnerability | Tanya Janca
Description
Developers are like water: if you make your security protocols too difficult, they will find a way to flow right around them. This week on Dev Interrupted, bestselling author and OWASP Top 10 Project Leader Tanya Janca returns to unpack why vibe coding has officially made the list of the most critical security risks in software development. Tanya breaks down the psychology of bad code, explains why the modern software engineer has become the primary attack surface, and shares actionable strategies for shifting security left directly into your AI prompts. Finally, she provides practical, behavioral solutions for building a golden path that makes secure coding the easy choice for your engineering team.
Follow the show:
- Subscribe to our Substack
- Follow us on LinkedIn
- Subscribe to our YouTube Channel
- Leave us a Review
Follow the hosts:
Follow today's guest:
- SheHacksPurple: Learn secure coding from Tanya at shehackspurple.ca
- DevSec Station: Listen to Tanya's bite-sized security podcast for developers at devsecstation.com
- Secure My Vibe: Download Tanya's free AI secure coding prompt library at securemyvibe.ca
- The Psychology of Bad Code: Read Tanya's insightful blog series on behavioral economics and application security on the SheHacksPurple Blog
- OWASP Top 10: Learn more about the most critical security risks to web applications at owasp.org
- Tanya’s Newsletter: Sign up for Tanya’s newsletter at newsletter.shehackspurple.ca
- Connect with Tanya: LinkedIn | Twitter/X
OFFERS
- Start Free Trial: Get started with LinearB's AI productivity platform for free.
- Book a Demo: Learn how you can ship faster, improve DevEx, and lead with confidence in the AI era.
LEARN ABOUT LINEARB
- AI Code Reviews: Automate reviews to catch bugs, security risks, and performance issues before they hit production.
- AI & Productivity Insights: Go beyond DORA with AI-powered recommendations and dashboards to measure and improve performance.
- AI-Powered Workflow Automations: Use AI-ge